OpenAI on Friday revealed that it banned a set of accounts that used its ChatGPT tool to develop a suspected artificial intelligence (AI)-powered surveillance tool. The social media listening tool… Read More »OpenAI Bans Accounts Misusing ChatGPT for Surveillance and Influence Campaigns
An analysis of a data leak from a Chinese cybersecurity company TopSec has revealed that it likely offers censorship-as-a-service solutions to prospective customers, including a state-owned enterprise in the country.… Read More »Data Leak Exposes TopSec’s Role in China’s Censorship-as-a-Service Operations
Apple is removing its Advanced Data Protection (ADP) feature for iCloud from the United Kingdom with immediate effect following government demands for backdoor access to encrypted user data. The development… Read More »Apple Drops iCloud’s Advanced Data Protection in the U.K. Amid Encryption Backdoor Demands
The threat actors behind the Darcula phishing-as-a-service (PhaaS) platform appear to be readying a new version that allows prospective customers and cyber crooks to clone any brand’s legitimate website and… Read More »Cybercriminals Can Now Clone Any Brand’s Site in Minutes Using Darcula PhaaS v3
In today’s rapidly evolving digital landscape, weak identity security isn’t just a flaw—it’s a major risk that can expose your business to breaches and costly downtime. Many organizations are overwhelmed… Read More »Webinar: Learn How to Identify High-Risk Identity Gaps and Slash Security Debt in 2025
Wherever there’s been conflict in the world, propaganda has never been far away. Travel back in time to 515 BC and read the Behistun Inscription, an autobiography by Persian King… Read More »AI-Powered Deception is a Menace to Our Societies
A high-severity security flaw impacting the Craft content management system (CMS) has been added by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) to its Known Exploited Vulnerabilities (KEV) catalog,… Read More »CISA Flags Craft CMS Vulnerability CVE-2025-23209 Amid Active Attacks
Cisco has confirmed that a Chinese threat actor known as Salt Typhoon gained access by likely abusing a known security flaw tracked as CVE-2018-0171, and by obtaining legitimate victim login… Read More »Cisco Confirms Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks
Freelance software developers are the target of an ongoing campaign that leverages job interview-themed lures to deliver cross-platform malware families known as BeaverTail and InvisibleFerret. The activity, linked to North… Read More »North Korean Hackers Target Freelance Developers in Job Scam to Deploy Malware
A malware campaign distributing the XLoader malware has been observed using the DLL side-loading technique by making use of a legitimate application associated with the Eclipse Foundation. “The legitimate application… Read More »Cybercriminals Use Eclipse Jarsigner to Deploy XLoader Malware via ZIP Archives